Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32382e302f32342d3234203d3e20323730353934.roa
File:                     3137372e33372e32382e302f32342d3234203d3e20323730353934.roa (raw, json)
Hash identifier:          3gwxg9TpgUtmE0Gm31GfcoDTQdJWbgUzpd4U8DwlGjI=
Subject key identifier:   CE:19:49:59:FD:6F:61:B9:00:06:A2:AA:BB:CC:20:3F:56:AE:60:0F
Certificate issuer:       /CN=FBCE40180F6E820F31920824D82B285CF0E32992
Certificate serial:       23CB917A90E5E36C18C8CD422F540847AC1DA33A
Authority key identifier: FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32382e302f32342d3234203d3e20323730353934.roa
Signing time:             Wed 17 May 2023 14:29:33 +0000
ROA not before:           Wed 17 May 2023 14:24:33 +0000
ROA not after:            Wed 15 May 2024 14:29:33 +0000
asID:                     270594
IP address blocks:        177.37.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cb:91:7a:90:e5:e3:6c:18:c8:cd:42:2f:54:08:47:ac:1d:a3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCE40180F6E820F31920824D82B285CF0E32992
        Validity
            Not Before: May 17 14:24:33 2023 GMT
            Not After : May 15 14:29:33 2024 GMT
        Subject: CN=CE194959FD6F61B90006A2AABBCC203F56AE600F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:dd:79:02:2d:6a:cb:88:63:a1:cc:ef:ab:
                    be:24:50:f6:98:4f:33:4b:68:c5:70:a9:da:2d:b5:
                    b3:24:51:32:1d:9b:be:13:00:e2:ae:30:47:6c:ca:
                    6a:1b:11:41:da:81:b7:1d:0d:cc:98:26:5e:03:66:
                    f2:0c:ac:48:cc:af:a3:e9:f3:2a:aa:33:1b:82:3a:
                    30:7a:2e:d8:54:dd:2d:17:68:08:3e:ff:22:27:4c:
                    9e:48:ef:34:2a:c4:0b:a6:c6:4c:80:77:69:d8:a8:
                    9a:da:ae:cc:0b:ec:2b:f3:de:bb:ee:47:4f:4f:4d:
                    63:3b:79:5c:df:8c:21:57:d0:28:71:98:0a:16:df:
                    52:a6:2f:2d:29:b7:f3:18:b5:5f:02:93:d2:58:cb:
                    a8:83:33:d2:57:5f:b7:d0:75:b9:59:54:a6:63:fb:
                    d5:b2:b8:b3:ff:6f:2b:3c:f0:8d:1b:43:16:d9:f0:
                    53:47:88:20:ce:83:3f:d9:64:ed:5b:52:8a:47:d4:
                    d8:36:f3:7b:17:d7:c1:e0:05:f2:1e:1a:d8:17:bc:
                    fa:29:73:76:9b:07:16:94:cd:b8:a7:f4:36:e4:4d:
                    90:42:7a:9b:ae:77:0a:45:ec:25:f2:00:f3:c2:30:
                    4e:27:0e:74:c7:6c:aa:9f:33:aa:a8:01:b2:4a:72:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:19:49:59:FD:6F:61:B9:00:06:A2:AA:BB:CC:20:3F:56:AE:60:0F
            X509v3 Authority Key Identifier:
                keyid:FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/FBCE40180F6E820F31920824D82B285CF0E32992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32382e302f32342d3234203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:4b:2a:ae:79:88:25:7c:76:9f:5b:89:d8:7f:a2:5a:d6:56:
         ca:38:28:d6:1e:34:a5:09:8c:5f:49:70:81:af:88:0f:33:4d:
         d2:7f:56:a6:6a:8c:2f:ef:8f:c6:ee:5c:93:28:c7:8e:f1:48:
         81:d2:ce:5e:21:92:0f:b5:26:fd:72:a6:34:f9:f5:9f:ca:6b:
         27:c5:4b:f0:9f:3a:e9:15:c1:32:9a:e6:ef:09:23:e9:6b:06:
         91:e1:60:6d:37:35:18:e9:f6:09:0a:12:b5:3b:c2:d0:67:5f:
         96:8e:f4:9a:dc:ae:34:aa:d0:90:7c:88:31:85:7f:40:a2:e2:
         cf:ee:60:be:a7:7e:33:dc:d5:11:d5:6a:48:00:f8:72:5d:93:
         cd:fb:a1:5c:38:eb:48:d1:98:9e:13:04:34:77:38:f8:61:b1:
         13:60:f9:da:7a:ac:c0:87:96:ad:02:9e:bd:c3:54:f2:d2:a7:
         bc:33:91:c5:f1:f1:64:2d:cb:4e:57:95:5e:30:80:fb:82:59:
         71:31:0c:45:31:38:75:a2:db:3b:31:fe:7a:90:43:95:34:6c:
         28:7e:3b:6e:30:6c:32:6c:df:6c:0d:58:c5:2a:10:a4:40:66:
         d5:12:48:88:47:41:74:33:5c:7f:61:39:6c:0d:df:e1:77:81:
         00:d1:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org